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IN THE CLAIMS : 

Please amend the claims as indicated below. 

1. (Original) A computer-implemented method for authenticating a user to 
one or more groups, said method comprising the steps of: 

computationally verifying an identity of said user; and 
computationally verifying a membership of said user with said one or 
more groups, wherein said verifying computations are performed substantially 
simultaneously using user information stored in a computer file associated with said user. 

2. (Original) The method of claim 1, further comprising the step of 
registering said user with at least one of said one or more groups. 

3. (Original) The method of claim 2, wherein said registering step further 
comprises the step of said user and said at least one of said one or more groups 
exchanging a respective identifier. 

4. (Original) The method of claim 3, wherein said user identifier is expressed 
as follows: 

IDj = g x i h mod p, 

where g and Xj are randomly generated numbers, and h is a hash function on a random 
number concatenated with information of said user, U. : 

,5. (Original) The method of claim 3, wherein said identifier of said at least 

one of said one or more groups is expressed as follows: 
Gi =g k i h modp, 

where g and ki are randomly generated numbers, and h is a hash function on a random 
number concatenated with information of said user, U. 
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6. (Original) The method of claim 2, wherein said registering step further 
comprises the step of creating a registration identifier. 

7. (Original) The method of claim 6, wherein said registering step between 
said user, U, and said at least one of said one or more groups, Gi, further comprises the 
step of creating a registration identifier, (Gi, Si), where (Si = g Sl ), g is a randomly 
generated number and Sj is obtained as follows: 

s i =x i h-k i hG mod(/?-l) . 

8. (Original) The method of claim 1, wherein said user identity and 
membership are verified if: 

G O g y(r.s)LjJ IDig r modp 
/=1 

wherein said user is identified by an identifier, IDi, equal to g Xjh mod p, said one or more 

/ 

groups are identified by an identifier, Gj, equal to g k ' h , V(r,s)=^Ts i +r , r is a randomly 

t=\ 

selected wrap value, mod p, g and Xi are randomly generated numbers, h is a hash 
function on a random number concatenated with user information and Si is obtained as 
follows: 

s i =x i h-k i hG mod(p-l) . 

9. (Original) The method of claim 1, wherein said verifying computations are 
performed in a single operation based on the El Gomal public key algorithm. 

10. (Original) The method of claim 1, wherein said user information is stored 

i 

on a smart card that provides tamper-resistant features. 

11. (Original) The method of claim 1, wherein said user information is stored 
in a memory of a computer. 
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12. (Original) The method of claim 1, wherein a user , that satisfies said 
verifying computations is allowed to access a plurality of groups. 

13. (Currently Amended) A method for authenticating a user to one or more 
groups, said method comprising the steps of: 

verifying an identity of said user; and 

verifying a membership of said user with said one or more groups, 
wherein said verifying steps are performed using a single operation and user information 
stored in a computer file associated with said user . 

14. (Original) The method of claim 13, further comprising the step of 
registering said user with at least one of said one or more groups. 

15. (Original) The method of claim 14, wherein said registering step further 
comprises the step of said user and said at least one of said one or more groups 
exchanging a respective identifier. 

16. (Original) The method of claim 15, wherein said user identifier is 
expressed as follows: 

IDi = g x i h mod p, 

where g and Xj are randomly generated numbers, and h is a hash function on a random 
number concatenated with information of said user, U. 

17. (Original) The method of claim 15, wherein said identifier of said at least 
one of said one or more groups is expressed as follows: 

Gj =g kih modp, 

where g and ki are randomly generated numbers, and h is a hash function on a random 
number concatenated with information of said user, U. 

18. (Original) The method of claim 13, wherein said single operation is 
expressed as: 
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G G g v ™=YllD ig r , mod p, 

/=1 

and wherein said user is identified by an identifier, IDj, equal to g x ' h mod p, said one or 

more groups are identified by an identifier, Gj, equal to g k ' h , V(r 9 s)=^ d s i +r , r is a 

randomly selected wrap value, mod p, g and Xi are randomly generated numbers, h is a 
hash function on a random number concatenated with user information and Si is obtained 
as follows: 

s i =x i h-k i hG mod(/?-l) . 

19. (Original) The method of claim 13, wherein said single operation is based 
on the El Gomal public key algorithm. 

20. (Original) The method of claim 13, wherein said single operation 
processes user information stored on a smart card that provides tamper-resistant features. 

21. (Original) The method of claim 13, wherein said single operation 
processes user information stored in a memory of a computer. 

22. (Original) A system for authenticating a user to one or more groups, said 
system comprising: 

a memory that stores computer-readable code; and 

a processor operatively coupled to said memory, said processor configured 
to implement said computer-readable code, said computer-readable code configured to: 
verify an identity of said user; and 

verify a membership of said user with said one or more groups, wherein 
said verifying computations are performed substantially simultaneously using user 
information stored in a computer file associated with said user. 

23. (Original) An article of manufacture for authenticating a user to one or 
more groups, comprising: 



501019-A-01-US (Nadooshan) 



a computer readable medium having computer readable code means 
embodied thereon, said computer readable program code means comprising: 
a step to verify an identity of said user; and 

a step to verify a membership of said user with said one or more groups, 
wherein said verifying computations are performed substantially simultaneously using 
user information stored in a computer file associated with said user. 

24. (Currently Amended) A system for authenticating a user to one or more 
groups, said method comprising the steps of: 

a memory that stores computer-readable code; and 
a processor operatively coupled to said memory, said processor configured 
to implement said computer-readable code, said computer-readable code configured to: 
verify an identity of said user; and 

verify a membership of said user with said one or more groups, wherein 
said verifying steps are performed using a single operation and user information stored in 
a computer file associated with said user . 

25. (Currently Amended) An article of manufacture for authenticating a user 
to one or more groups, comprising: 

a computer readable medium having computer readable code means 
embodied thereon, said computer readable program code means comprising: 
a step to verify an identity of said user; and 

a step to verify a membership of said user with said one or more groups, 
wherein said verifying steps are performed using a single operation and user information 
stored in a computer file associated with said user . 

i 
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